Sample AWS IAM for OpenPhoto

aws-iam-for-openphoto

# use the s3:* and/or sdb:* depending on which you'll need
# sdb domain prefix can be any string.
# s3 bucket names are globally unique
# your account id should not have any spaces or dashes

{
  "Statement": [
    {
      "Sid": "StmtNNNNNNNNNNNNN",
      "Action": "s3:*",
      "Effect": "Allow",
      "Resource": "arn:aws:s3:::{your_bucket_name}"
    },
    {
      "Sid": "StmtMMMMMMMMMMMMM",
      "Action": "sdb:*",
      "Effect": "Allow",
      "Resource": "arn:aws:sdb:*:{your_account_id}:domain/{an_sdb_domain_prefix}*"
    }
  ]
}